It resides here: https://www.virustotal.com/nl/url/3e549cfaab5f869346878937805f2b9bf5ba08d54b07598aa86d472ac6b350fd/analysis/1425580716/
Detection: https://www.virustotal.com/nl/file/f8b7030fa4f730612bafdf66f2586655cc815499df44bb86eb21de9b9f0ad042/analysis/1425580741/
92% detect: http://www.herdprotect.com/domain-www.win-install.net.aspx
pol